Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
File:                     6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json)
Hash identifier:          UKE5RCg+6AeT5BcsWJ+0tDcsdrMgBAwG6La0aaHyrwM=
Subject key identifier:   14:55:CC:B8:AF:F6:B5:7E:5A:5B:55:40:E5:4A:DA:16:87:E5:7C:A5
Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D
Certificate issuer:       /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
Manifest number:          01B3
Signing time:             Fri 25 Apr 2025 04:06:13 +0000
Manifest this update:     Fri 25 Apr 2025 04:06:12 +0000
Manifest next update:     Fri 02 May 2025 04:06:12 +0000
Files and hashes:         1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: tPy1yyMw8g8QsPQdudR2NMbTiUihVZaciFURgWaWKVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl
                          rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911954F, serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
        Validity
            Not Before: Apr 25 04:06:12 2025 GMT
            Not After : May  2 04:06:12 2025 GMT
        Subject: CN=680b0a35-325a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:3b:be:c2:93:c8:06:ff:75:d0:5a:73:28:
                    0b:4e:10:9e:c3:c1:f1:9a:73:9a:0e:46:f0:b0:42:
                    75:b2:ad:1f:11:0d:34:37:55:71:d3:56:93:4f:b5:
                    b1:14:7c:24:56:08:81:82:25:e9:58:a9:96:50:d9:
                    68:ed:7f:ef:82:33:a4:13:95:69:95:36:01:22:46:
                    fe:04:1a:fb:28:c8:97:e5:5c:91:0f:68:01:35:79:
                    62:77:20:70:87:b8:fe:03:9d:e7:20:3f:76:7b:4a:
                    1b:5f:1f:cf:bd:8e:82:0b:18:9d:08:39:dc:82:7e:
                    7b:77:3a:b7:e1:a1:87:1a:1f:38:f7:3b:5c:ef:2f:
                    2f:12:9e:b7:33:bc:3a:a3:6f:c5:13:59:60:c1:06:
                    59:0b:f9:a9:8e:a9:20:e2:98:71:f0:e8:fb:fc:bf:
                    93:8c:a8:6c:13:fe:8d:75:cd:b6:5f:5a:66:67:64:
                    c6:60:89:e8:e2:48:34:a9:a8:45:58:be:df:0a:ba:
                    d2:28:10:43:15:bc:8d:5a:d3:27:39:02:d7:c7:48:
                    71:aa:55:50:3b:1b:64:86:28:cc:b3:19:5c:e7:cd:
                    d5:d7:2c:53:d5:5c:d3:da:71:5a:f1:e8:1e:92:ae:
                    f1:2b:d6:49:eb:8c:e5:f4:59:c7:aa:67:f0:4b:ee:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:55:CC:B8:AF:F6:B5:7E:5A:5B:55:40:E5:4A:DA:16:87:E5:7C:A5
            X509v3 Authority Key Identifier:
                keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:21:a3:c9:15:5d:d4:99:90:41:28:d0:63:20:1f:87:8a:
         2b:cc:7e:40:ee:40:a9:90:60:f8:4e:06:89:68:9a:7d:5c:52:
         31:cc:33:1f:e9:ab:15:83:23:1f:eb:ac:5a:71:2f:b0:a3:d8:
         9b:ee:3b:7f:c4:e6:29:b7:9e:40:fd:f5:71:44:c4:e0:f7:ed:
         20:a9:4b:2e:60:ae:ed:d2:9d:78:62:7e:5d:05:a5:15:38:4f:
         54:e2:4f:a3:79:09:62:4b:9a:65:de:ec:01:34:74:91:10:d5:
         ec:c4:7b:32:1b:79:3d:01:5d:56:d4:6a:1a:6c:0c:61:45:72:
         8b:4d:9e:32:af:e6:3c:9f:c0:9d:78:c0:08:66:a0:75:69:45:
         51:72:71:76:68:29:4d:6e:c8:99:ad:05:f5:cb:eb:ac:79:79:
         87:8d:f5:17:b6:2f:b7:58:f5:5e:74:68:a2:36:cf:d4:af:bf:
         25:de:83:b1:cd:b8:70:2c:cd:38:8b:5e:93:ee:6a:6b:a7:2b:
         b6:df:1f:b3:12:19:78:60:86:d2:11:55:07:f6:ea:7f:d9:5a:
         e5:db:ea:a9:3b:d2:f7:6b:8e:17:9c:6d:24:58:dd:ff:f8:a4:
         8b:7a:89:9b:07:26:49:76:e3:ef:2a:3d:ae:51:3f:c8:e1:02:
         62:3b:34:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1NEYxMTAvBgNVBAUTKEU5OEVFQ0I3MzBGMUE5NEE2NkE5QjUxMkZDNzc1Nzc4
QzYwMDgzMEQwHhcNMjUwNDI1MDQwNjEyWhcNMjUwNTAyMDQwNjEyWjAYMRYwFAYD
VQQDEw02ODBiMGEzNS0zMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuBg7vsKTyAb/ddBacygLThCew8HxmnOaDkbwsEJ1sq0fEQ00N1Vx01aTT7Wx
FHwkVgiBgiXpWKmWUNlo7X/vgjOkE5VplTYBIkb+BBr7KMiX5VyRD2gBNXlidyBw
h7j+A53nID92e0obXx/PvY6CCxidCDncgn57dzq34aGHGh849ztc7y8vEp63M7w6
o2/FE1lgwQZZC/mpjqkg4phx8Oj7/L+TjKhsE/6Ndc22X1pmZ2TGYIno4kg0qahF
WL7fCrrSKBBDFbyNWtMnOQLXx0hxqlVQOxtkhijMsxlc583V1yxT1VzT2nFa8ege
kq7xK9ZJ64zl9FnHqmfwS+6aRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRVzLiv
9rV+WltVQOVK2haH5XylMB8GA1UdIwQYMBaAFOmO7Lcw8alKZqm1Evx3V3jGAIMN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx
NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi82WTdzdHpEeHFVcG1xYlVTX0hkWGVNWUFn
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZZN3N0ekR4cVVwbXFiVVNfSGRYZU1ZQWd3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi82WTdzdHpEeHFV
cG1xYlVTX0hkWGVNWUFndzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaViGjyRVd1JmQQSjQYyAfh4orzH5A7kCpkGD4TgaJaJp9XFIxzDMf
6asVgyMf66xacS+wo9ib7jt/xOYpt55A/fVxRMTg9+0gqUsuYK7t0p14Yn5dBaUV
OE9U4k+jeQliS5pl3uwBNHSRENXsxHsyG3k9AV1W1GoabAxhRXKLTZ4yr+Y8n8Cd
eMAIZqB1aUVRcnF2aClNbsiZrQX1y+useXmHjfUXti+3WPVedGiiNs/Ur78l3oOx
zbhwLM04i16T7mprpyu23x+zEhl4YIbSEVUH9up/2Vrl2+qpO9L3a44XnG0kWN3/
+KSLeombByZJduPvKj2uUT/I4QJiOzS2
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:35:34 2025 by rpki-client